CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-52954: linux kernel from 4.13 (inclusive), before 5.10.258 (exclusive), from 5.11 (inclusive), before 5.15.209 (exclusive)…

CVE-2026-52954. CVSS 3.1 base score 7.5 (HIGH, Source advisory). EPSS 0.00716 (percentile 0.52791), scored 15-Oct-2026.

Affected technology

linux kernel · from 4.13 (inclusive), before 5.10.258 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.209 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.175 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.141 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.91 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.33 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.10 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

Linux · 5cf9c4a9959b6273675310d14a834ef14fbca37c to before c7bf7864e2924fa5508ac270b0e9364bc13d5a6c, 5cf9c4a9959b6273675310d14a834ef14fbca37c to before f47430fc1f815e87406e2d3b4e476eff1bc7fd9b, 5cf9c4a9959b6273675310d14a834ef14fbca37c to before 0b6a3bcb91bc5bfeda39f0df3b71bab62c13e9da, 5cf9c4a9959b6273675310d14a834ef14fbca37c to before 534ebc08df97c47d4c7596f336fa31ecbf91519c, 5cf9c4a9959b6273675310d14a834ef14fbca37c to before 80c73bd1b2b04355d1d0c29be8ccbd25a380905d, 5cf9c4a9959b6273675310d14a834ef14fbca37c to before 4d2b37abda9536808655830d683dc491d31741a8, 5cf9c4a9959b6273675310d14a834ef14fbca37c to before 0a1265a9ab875f92b6a3ffb497404f46cf9d76a3, 5cf9c4a9959b6273675310d14a834ef14fbca37c to before d289478cfc0bcf81c7914200d6abdcb78bd04ded
Linux

Linux · 4.13
Linux

Component: Not specified by the source
Function: and
File: net/ceph/osdmap.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-617
CCR priority
30.2 /100 (P4)
CVSS 3.1
7.5 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · Source advisory
EPSS
0.00716 · percentile 0.52791 · 2026-10-15
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-52954.html